PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
ec9457bb3d63dbb9a62c889ac67f3f73ec2a88d6413ff186857c9913160a420f.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ec9457bb3d63dbb9a62c889ac67f3f73ec2a88d6413ff186857c9913160a420f.dll
Resource
win10v2004-20240802-en
Target
ec9457bb3d63dbb9a62c889ac67f3f73ec2a88d6413ff186857c9913160a420f
Size
3.5MB
MD5
83bced974d272cd4d5f75e3e96f8b921
SHA1
4fcdb8c4be67841a2650acdf91b9b9db106b0767
SHA256
ec9457bb3d63dbb9a62c889ac67f3f73ec2a88d6413ff186857c9913160a420f
SHA512
fd027527dd48747bcfc2387db768fe4ebedf5de32e7fc2b9ea383b9a2d212a4bb41352b7d3298ff5a74223a67c74f1b0e8533f88ec06d9c85f49b736eeaa066c
SSDEEP
49152:1m9HeH4FtP460/Igc9F3eKozoBkwAYwlNUdh12MZXHBSn+YmW4O3m7cjmMQTC+zQ:8QKotcTlBk9YwzEhPbYzjmMtccXk8Kk
Checks for missing Authenticode signature.
resource |
---|
ec9457bb3d63dbb9a62c889ac67f3f73ec2a88d6413ff186857c9913160a420f |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ